WebResource and ScriptResource

[Brad]

I have a Windows Server 2008 with IIS 7.  I've been using the app pool set to classic.  I'm getting ton of the errors listed below and my frustration level is high now.  When I look at it under Visual Studio or browse to it locally through IIS it works find.  When I hit it externally, I can't get far and get a ton of the errors below.  The site is on to web servers that have a load balancer.  The site is 3.5 framework.  Any ideas of how to handle this?  Everything I read, says to just make sure you have the "handler" and "httphandler" taken care of.

Log Entry :

04/18/2011 08:23:06

Error in: http://IP/WebResource.axd?d=VI8cl_KcmUGuI9J1ljdtUfC1Fw80RJY2VzQZYXQfGP0yeuKF-7AWuly-tpJ11x2a_6gaGIATt0WVy_mAl85-FKZ1YcAyy_vBFM5jGFPfo0ZORjc3fFgvDSzkUT_F6n-kXSDfUN3gV5VX-9vAY5MDBzkMYS81&t=634383688500000000. Error Message:This is an invalid webresource request.

_______________________________________________________________________________________

 

Log Entry :

04/18/2011 08:23:06

Error in: http://IP/ScriptResource.axd?d=fPOKxOrQov_9YUMZc3ASm_bwNNXSMem5KtbOESTth5rr7e5BE9ELI2PBp-1xMcPS20DG6vjSCqyO1ID_YMACdl_KttkxrOcGBwn7g2H6rYdcmbnW7g6JSr4959JxtNMIlVDQ2mLSAtjaD_kna09x9uLr84pDD2WagO4CW20FUv8P7cUX0&t=5c2f384e. Error Message:This is an invalid script resource request.

_______________________________________________________________________________________

Web.config

    <httpHandlers>
      <add verb="GET" path="CaptchaImage.aspx" type="WebControlCaptcha.CaptchaImageHandler, WebControlCaptcha" />
      <remove verb="*" path="*.asmx" />
      <add verb="*" path="*.asmx" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
      <add verb="*" path="*_AppService.axd" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
      <add verb="GET,HEAD" path="ScriptResource.axd" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" validate="false" />
      <add path="ChartImage.axd" type="Telerik.Web.UI.ChartHttpHandler" verb="*" validate="false" />
      <add path="Telerik.Web.UI.SpellCheckHandler.axd" type="Telerik.Web.UI.SpellCheckHandler" verb="*" validate="false" />
      <add path="Telerik.Web.UI.DialogHandler.aspx" type="Telerik.Web.UI.DialogHandler" verb="*" validate="false" />
      <add path="Telerik.RadUploadProgressHandler.ashx" type="Telerik.Web.UI.RadUploadProgressHandler" verb="*" validate="false" />
      <add path="Telerik.Web.UI.WebResource.axd" type="Telerik.Web.UI.WebResource" verb="*" validate="false" />
    </httpHandlers>

    <handlers>
      <remove name="WebServiceHandlerFactory-Integrated" />
      <remove name="ScriptHandlerFactory" />
      <remove name="ScriptHandlerFactoryAppServices" />
      <remove name="ScriptResource" />
     
      <remove name="ChartImage_axd" />
      <remove name="Telerik_Web_UI_SpellCheckHandler_axd" />
      <remove name="Telerik_Web_UI_DialogHandler_aspx" />
      <remove name="Telerik_RadUploadProgressHandler_ashx" />
      <remove name="Telerik_Web_UI_WebResource_axd" />
      <add name="CaptchaImage_aspx" path="CaptchaImage.aspx" verb="*" type="WebControlCaptcha.CaptchaImageHandler" resourceType="Unspecified" preCondition="integratedMode" />
      <add name="ImageVerifier_axd" path="ImageVerifier.axd" verb="*" type="MRMUtilities.Web.UI.Controls.CImageVerifier" resourceType="Unspecified" preCondition="integratedMode" /><add name="ScriptHandlerFactory" verb="*" path="*.asmx" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
      <add name="ScriptHandlerFactoryAppServices" verb="*" path="*_AppService.axd" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
      <add name="ScriptResource" preCondition="integratedMode" verb="GET,HEAD" path="ScriptResource.axd" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
      <add name="ChartImage_axd" path="ChartImage.axd" type="Telerik.Web.UI.ChartHttpHandler" verb="*" preCondition="integratedMode,runtimeVersionv2.0" />
      <add name="Telerik_Web_UI_SpellCheckHandler_axd" path="Telerik.Web.UI.SpellCheckHandler.axd" type="Telerik.Web.UI.SpellCheckHandler" verb="*" preCondition="integratedMode,runtimeVersionv2.0" />
      <add name="Telerik_Web_UI_DialogHandler_aspx" path="Telerik.Web.UI.DialogHandler.aspx" type="Telerik.Web.UI.DialogHandler" verb="*" preCondition="integratedMode,runtimeVersionv2.0" />
      <add name="Telerik_RadUploadProgressHandler_ashx" path="Telerik.RadUploadProgressHandler.ashx" type="Telerik.Web.UI.RadUploadProgressHandler" verb="*" preCondition="integratedMode,runtimeVersionv2.0" />
      <add name="Telerik_Web_UI_WebResource_axd" path="Telerik.Web.UI.WebResource.axd" type="Telerik.Web.UI.WebResource" verb="*" preCondition="integratedMode,runtimeVersionv2.0" />
    </handlers>

 

[Martin]

Hello Brad,

Are you using the RadScriptManager control to serve the ASP.NET AJAX scripts? Please also note that the load balancing can create problems in itself. You should take care of synchronizing the machine keys on all servers:

http://msdn.microsoft.com/en-us/library/ms998288.aspx#paght000007_webfarmdeploymentconsiderations

If none of the above helps please consider turning on our CDN or setup your own local store so the control scripts are loaded from physical files and not from web resources. The CDN support works both on normal and SSL sites. For more information, see our online documentation - http://www.telerik.com/help/aspnet-ajax/radscriptmanager-cdn-support.html

Let me know whether further assistance is needed.

Best wishes,
Martin
the Telerik team

[Simon]

Hello Brad,

We have had numerous reports for this issue for the past 2 years and we still do not know what is causing it. The main obstacle in detecting the error is the lack of information about it. Different clients have reported that the error happens intermittently, mostly on web farms and that the resource name cannot be decrypted.

We have also discovered (via other customer reports) the same conditions plus another one - the d= query parameter is shorter (or probably different in the general case) for these invalid requests.

Upon searching through the Web for more info about the problem I found a lot of posts on the matter. Here are the two that felt most correct, in a sense that they described all the manifestations we knew about the issue so far:

• System.Web.HttpException: This is an invalid script resource request
• ASP.Net’s WebResource.axd and machineKey badness
• How To: Configure MachineKey in ASP.NET 2.0 - Web Farm Deployment Considerations

Please, if possible, implement the approach discussed in the above linked pages and let me know if there is any improvement.

Best wishes,
Simon
the Telerik team

[Steven]

We are experiencing this problem as well.  The only thing that I can offer is our logs.  We are also in a load balanced environment (matching machine keys).  We are only receiving this error on one page in our application that is using the RadCombo, RadTreeView, and RadTextbox with the Office2007 skin.  We are using version 2009.02.0826.35 of Telerik.Web.UI.dll.

Our error logs consistently report:
Exception Type: System.Web.HttpException
Exception Message: This is an invalid webresource request.
Exception Source: System.Web
Exception Target Site: System.Web.IHttpHandler.ProcessRequest
HTTP Referer: /AddWorkerWizard.aspx
URL: http://app_url/WebResource.axd?d=-XWHfFuSTf65rjKe7yPQomYz05wIjAeWtRHzI2lBXBk3Ue4jTZaLv3LwSP_5Ra6Rvbt8-gaBBwOL1aPGR7BdAXv_HlJM42l-PWYLHj66wMf5BGGvoUu28pyODrt8Oj805jSo61mqY3cpQqgz9jqmaAR0sHo1&t=634309538800000000
HTTP_USER_AGENT: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

We've tried the link that I've found on so many of these similar issues (http://blogs.telerik.com/hristodeshev/posts/07-03-26/debugging_asp_net_2_0_web_resources_decrypting_the_url_and_getting_the_resource_name.aspx), but we get pre-compilation errors when we attempt to drop the page in our web and access the page.

I've run Fiddler traces on our development and local environments and followed all of the WebResource.axd requests, but all paths turned out OK.  I'm going to see if we can access the production version that our client's use and see if Fiddler turns up anything different.  I'm not quite sure how this will help since we still won't readily know which resource is throwing the error.  I may have to compare the lists of WebResource requests as I follow them to see which file is the culprit, since I cannot decrypt the file names with the aspx file mentioned above.  I'll keep you apprised.

Thanks,

Steve

[Simon]

Hi Steven,

Thank you for these details.

It would be great if you share with us also your findings after your tests. One thing to have in mind is to see if there is any difference in the length of the WebResource.axd link that is being generated.

Finally, another customer had a similar issue - their machine keys were synchronized. They reported they had resolved the problem by installing the following patch on their host - http://support.microsoft.com/kb/2418241. You may want to try this solution as well.

All the best,
Simon
the Telerik team

[Steven]

Hi Simon,

Still no luck tracking down this error.  I'm not quite sure if this patch applies to us.  The patch specifically mentions that it is for use on Windows 2003 Server and Windows XP, but we are using Windows 2008 R2.  I'll look into the DLL versions and see if it is something that we can install.

Fortunately [and unfortunately] we began having this issue one of our QA servers that is NOT load balanced, and it is returning a bit more information about this error.  This is not a load-balanced environment, but we added the machineKeys to the release for an upcoming production (load-balanced) rollout to try to head off this problem. (Note: this didn't happen in our non-load balanced QA servers until we added the machineKey). Of interest, other than the error message ("This is an invalid webresource request"), is the http_referer of making the request: 

/Telerik.Web.UI.WebResource.axd?compress=2&_TSM_CombinedScripts_=%3b%3bTelerik.Web.UI%2c+Version%3d2009.2.826.35%2c+Culture%3dneutral%2c+PublicKeyToken%3d121fae78165ba3d4%3aen-US%3ad2d891f5-3533-469c-b9a2-ac7d16eb23ff%3a8cee9284%3aed2942d4%3af82ffad1

I would like to attempt to upgrade this dll (2009.2.826.35) as it is quite old, and will do so for a future release of our product, but with out current product release cycle, it won't happen in the next 3 months.  (Our application is quite large and references Telerik/DevExpress controls throughout and the impact of this upgrade will need to be assessed before performing it.) Do you know of any issues with the 2009.2.826.35 release that may be causing this issue?  

If I can track down which page/pages this error is happening on, I may (for the short term) replace the offending Telerik control(s) with it's DevExpress counterpart, if that task isn't too large, but I would like to find a better/easier solution.

Thanks,

Steve

UPDATE:  it looks like the R2 version of the security update that you mentioned (http://support.microsoft.com/kb/2416472) is already installed on the server.

[Simon]

Hi Steven,

We have not encountered a specific issue that manifests in this way, so we have not applied any fixes. This also means that upgrading to a more recent version of Telerik.Web.UI will probably not affect the problem.

It is curious that *adding* the machineKey triggers the problem, however, this is insufficient to determine the cause in your case.

If you find anything particular, please let us know.

Best wishes,
Simon
the Telerik team